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Dial-up client sends version 
information and DN to PKI-Bridge 
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PKI-Bridge checks 
version information and 
forwards DN to Server- 
side cryptographic 
function 
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Server-side cryptographic 
function generates and forwards 
challenge string to PKI-Bridge 
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\ PKI-Bridge forwards challenge 


string to Dial-up Client 
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Dial-up Client forwards challenge 
string to Custom Script DLL 
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Custom Script DLL forwards 
challenge string to Client-side 
cryptographic function 
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Client-side cryptographic function 
utilizes the private key from 
security device, and generates 
signed response string 
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Server-side cryptographic 
function verifies signed response 
string 


Server-side cryptographic 
function obtains user's public key 
from directory service 


PKI-Bridge forwards signed 
response string to Server-side 
cryptographic function 
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PKI-Bridge receives packets and 
reconstructs signed response 
string (including decoding) 


Custom Script DLL forwards 
encoded packets to PKI-Bridge 


i 


Custom Script DLL encodes and 
breaks signed response string 
into packets 


Client-side cryptographic function 
forwards signed response string 
to Custom Script DLL 


j 


FIGURE 9 


